A review of cyber security risk assessment methods for SCADA systems

By Yulia Cherdantseva, P. Burnap, A. Blyth, Peter Eden, K. Jones, H. Soulsby, Kristan Stoddart. Computers & security, 2016

562 citations recorded by the source corpus.

This paper reviews the state of the art in cyber security risk assessment of Supervisory Control and Data Acquisition (SCADA) systems. We select and in-detail examine twenty-four risk assessment methods developed for or applied in the context of a SCADA system. We describe the essence of the methods and then analyse them in terms of aim; application domain; the stages of risk management addressed; key risk management concepts covered; impact measurement; sources of probabilistic data; evaluation and tool support. Based on the analysis, we suggest an intuitive scheme for the categorisation of cyber security risk assessment methods for SCADA systems. We also outline five research challenges facing the domain and point out the approaches that might be taken.

Subfields: Computer Networks and Communications, Control and Systems Engineering, Information Systems

View Paper: https://www.semanticscholar.org/paper/0bbb881db7e438408ee7faee0cb88d50bb1dd67f

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

1. Kashif Saleem
2. Haider Abbas
3. Raj Jain
4. Karl Henrik Johansson
5. Aiman Erbad
6. Deval Bhamare
7. Anam Sajid
8. Gang Feng

In Control and Systems Engineering

1. Anuradha M. Annaswamy
2. Mohammad Pirani
3. Aranya Chakrabortty
4. Seyed Mehran Dibaji
5. David Bezalel Flamholz
6. Kashif Saleem
7. Haider Abbas
8. Karl Henrik Johansson

In Information Systems

1. Haider Abbas
2. Raj Jain
3. Karl Henrik Johansson
4. Aiman Erbad
5. Deval Bhamare
6. Khaled Md. Khan

Citations in the corpus

• A systems and control perspective of CPS security (2019, background): “For survey of threat assessment, the reader is referred to [224].”
• Cybersecurity for industrial control systems: A survey (2020, background): “[77] review state of the art in cybersecurity risk assessment of Supervisory Control and Data Acquisition (SCADA) systems as well.”
• Cloud-Assisted IoT-Based SCADA Systems Security: A Review of the State of the Art and Future Challenges (2016, background): “Research challenges faced by SCADA systems in risk assessment are outlined in [37] and [38].”